LiquidWorm KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Config Download (Unauthenticated)
webapps hardware

LiquidWorm KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Factory Reset (Unauthenticated)
webapps hardware

LiquidWorm KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution
webapps hardware

LiquidWorm KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Authentication Bypass
webapps hardware

LiquidWorm KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection (Authenticated)
webapps hardware

LiquidWorm SOYAL Biometric Access Control System 5.0 - 'Change Admin Password' CSRF
webapps hardware

LiquidWorm SOYAL Biometric Access Control System 5.0 - Master Code Disclosure
webapps hardware

xxcdd CouchCMS 2.2.1 - Server-Side Request Forgery
webapps php

numan türle VestaCP 0.9.8 - 'v_sftp_licence' Command Injection
webapps multiple

Christian Vierschilling Profiling System for Human Resource Management 1.0 - Remote Code Execution (Unauthenticated)
webapps php

Piyush Patil Boonex Dolphin 7.4.2 - 'width' Stored XSS
webapps php

Clément Cruchet LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS
webapps php CVE-2019-12962

Piyush Patil Plone CMS 5.2.3 - 'Title' Stored XSS
webapps multiple

numan türle Hestia Control Panel 1.3.2 - Arbitrary File Write
webapps php

Piyush Patil SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (1)
webapps php

Murat ŞEKER rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (1)
webapps php